2026-08-12 归档

今日共收录 1910 条安全情报,包含 1065 个 CVE,437 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
漏洞预警2026-08-11 发布INFO

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields ar...

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Emai

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craf...

CVE-2026-72765

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before 1.123.67, 2.31.5, and 2.32.1), a user able to run ...

CVE-2026-72764

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow nod...

CVE-2026-72763

n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying...

CVE-2026-72762

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly int...

CVE-2026-72750

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query ope

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node. The node assigns output fields via a dot-notation path setter...

CVE-2026-72749

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administ...

CVE-2026-72747

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject maliciou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake. When a server is configured with RdstlsSecurity = TRUE, the handshake dispatches inbo...

CVE-2026-72746

FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake. When a server is configured

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberos_DecryptMessage() (winpr/libwinpr/sspi/Kerberos/kerberos.c). The 16-bit EC (extra count) field of a peer...

CVE-2026-72745

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberos_DecryptMessage() (winpr/libwinpr/sspi/Kerberos

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint (...

CVE-2026-72744

Nuxt versions >= 4.4.7 and = 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack o...

CVE-2026-69109

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insec...

CVE-2026-69108

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bound...

CVE-2026-64629

A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing speciall...

CVE-2026-59701

A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing speciall...

CVE-2026-59700

A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.3...

CVE-2026-59693

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerability while parsing specially strings...

CVE-2026-59086

A vulnerability has been identified in Simcenter Nastran (All versions < V2606). The affected applications contain a sta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 h...

CVE-2026-57263

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allo...

CVE-2026-57262

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded

历史摘要 · 未重新核验 · NVD